Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa
File: AS32780.roa (raw, json)
Hash identifier: AMlXXtGG4FIMbVcOSyL6cGwkAPSGSF61PldgD9P7Of0=
Subject key identifier: 5B:08:A8:D8:A9:71:74:A5:3F:6D:40:DA:C0:ED:7A:D7:C2:69:54:77
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 433E37F8EF529991839982D4FB110C59C2D59A08
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa
Signing time: Fri 07 Mar 2025 20:28:26 +0000
ROA not before: Fri 07 Mar 2025 20:23:26 +0000
ROA not after: Fri 06 Mar 2026 20:28:26 +0000
asID: 32780
IP address blocks: 104.234.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3e:37:f8:ef:52:99:91:83:99:82:d4:fb:11:0c:59:c2:d5:9a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 7 20:23:26 2025 GMT
Not After : Mar 6 20:28:26 2026 GMT
Subject: CN=5B08A8D8A97174A53F6D40DAC0ED7AD7C2695477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:bf:81:fd:2b:e2:69:72:19:ed:59:73:f5:
2f:96:d7:98:81:18:45:cb:70:49:9d:f6:33:0e:1d:
77:8c:18:8e:a3:f4:3e:30:b1:18:fb:99:b6:c3:26:
19:45:f7:cb:af:6c:49:ee:76:1d:cd:8b:c5:9f:16:
57:b7:9f:64:9d:fc:8a:c8:e4:43:f7:35:80:be:2d:
4d:3a:d0:e9:59:cd:ca:5e:cd:05:b2:f1:23:19:08:
35:3e:b7:68:6b:7e:9a:52:e5:e0:71:b0:6a:3e:15:
ed:38:a0:c5:82:6e:0e:c0:a6:8f:60:34:7c:11:d0:
fd:1e:39:1c:10:c1:f5:2d:fb:25:40:d1:7e:21:f1:
d1:8b:a5:3f:90:9b:41:cc:9b:e5:60:65:f8:19:8e:
63:80:ad:b9:2d:48:67:60:1f:31:67:e3:5c:d1:60:
4d:cd:5f:3c:3c:d6:78:3f:5f:b0:e3:93:26:03:0b:
e4:c9:71:83:b1:81:39:09:c3:00:e6:38:2b:9f:d3:
6c:59:5c:b8:b6:3f:1a:9c:03:ad:d9:09:fd:c9:69:
df:57:a3:00:05:34:06:90:6e:66:74:fd:6c:1a:1c:
fa:dd:87:e8:85:65:b3:0a:67:96:04:28:c8:15:a8:
75:8b:48:e1:55:24:d2:96:a6:f8:2f:b0:08:27:aa:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:A8:D8:A9:71:74:A5:3F:6D:40:DA:C0:ED:7A:D7:C2:69:54:77
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a3:90:fe:39:a4:3c:26:2a:ea:eb:e1:40:b1:80:5f:9f:f0:
d5:75:8f:5c:e9:00:bf:f4:41:b3:e3:dc:65:dc:a5:d4:86:13:
4b:58:ff:bc:d3:a2:26:1b:72:70:fc:b6:ca:06:fa:ab:32:23:
81:75:de:82:bd:62:ca:ee:7b:98:77:a0:46:b6:34:d1:a0:ff:
f7:82:1b:66:9b:71:e8:b1:ee:ff:45:19:6c:63:6c:f5:39:14:
58:30:ae:e8:e5:31:e7:9c:7b:7f:90:e6:5f:be:56:db:4e:b3:
0a:6b:5d:7d:51:9f:11:d0:c5:a9:a9:10:ab:5c:d7:84:43:c4:
83:ba:7f:0b:19:c2:bd:bc:4e:41:d3:73:e8:9d:17:f7:34:59:
6c:08:8c:82:eb:cc:aa:93:55:ec:a1:48:08:37:54:f1:24:2b:
ff:da:61:87:1f:b0:8e:0e:3a:9d:01:c8:13:80:bd:f2:ca:02:
68:38:12:82:45:22:60:a2:ca:eb:de:4e:8f:b6:b4:b9:45:d0:
d6:55:03:05:1f:3d:b1:04:67:31:bb:3e:4c:cd:8a:6b:e5:99:
1f:51:bb:b2:44:58:a5:ea:ea:d8:43:7a:5b:f0:95:ac:2b:0b:
40:6e:bc:b4:5a:fa:30:e0:39:05:19:e1:74:3a:a3:4d:8e:e5:
64:ed:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net